Forest Global Training Partners

Cyber Risks · Krebs on Security

Cybersecurity Policy Roundup

Summary: Senators Orrin Hatch and Kirsten Gillibrand introduced the International Cybercrime Reporting and Cooperation Act, which would have the White House identify countries posing cyber threats in an annual report and penalize those that fail to crack down on cyber criminals with cuts to U.S. export dollars, foreign-direct investment funds, and trade assistance grants. Separately, the U.S. Association for Computing Machinery and the Computing Research Association sent a letter opposing mandatory certification and licensing provisions in the Cybersecurity Act, a bill from Senators Jay Rockefeller and Olympia Snowe that would bar anyone from offering cybersecurity services to federal agencies or systems without certification under a Commerce Department program.

What you should know: The certification fight turns on a concrete claim from Purdue's Gene Spafford: a mandatory regime would require everyone to be certified in something "we don't know how to do and is changing almost monthly," while SANS's Alan Paller counters that most people who claim security knowledge "don't have a clue" - a split that decides who is allowed to defend federal networks.

Read the original at Krebs on Security ↗

Topics
Data Breaches
Related